Re: DMARC record

saquib.akhtar wrote:

Which is best DMARC policy that can be implemented?

There's no "BEST" policy for everyone, you need to decide which one is the best for you.

If you allow users/applications to send out email from your server and no other servers, it's the best to use 'p=reject' in DMARC DNS record, so that other mail servers can safely reject (forged) emails which has "@<your-domain>" as sender address.

For example:

v=DMARC1; p=reject; sp=none; rua=mailto:someone@mydomain.com

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?